commit 6eb64341221282c129eb6b2f98e9388836d23699
author Oleksii Grudev <ogrudev@mirantis.com> Fri Aug 10 15:46:07 2018 +0300
committer Oleksii Grudev <ogrudev@mirantis.com> Mon Aug 13 11:00:20 2018 +0300
tree 5096a97414553589e38f1a8294604b994b35c2bc
parent dd88c98022037314b9b00d8277a55f7e22818b36

Add classes for fernet rotation based on rsync

New classes contain parameters for fernet rotation based on rsync.
Moreover they contain cron job definition for rsync fernet rotation
script

Change-Id: I17a96e275da5ceccdccc689ed03c8ae9039ad8bc
Related-PROD: PROD-19973

keystone/server/fernet_rotation/cluster.yml

diff --git a/keystone/server/fernet_rotation/cluster.yml b/keystone/server/fernet_rotation/cluster.yml
new file mode 100644
index 0000000..e09b8e9
--- /dev/null
+++ b/keystone/server/fernet_rotation/cluster.yml
@@ -0,0 +1,20 @@
+parameters:
+  keystone:
+    server:
+      tokens:
+        fernet_sync_nodes_list:
+          sync_node01:
+            name: ${_param:openstack_control_node02_hostname}
+            enabled: True
+          sync_node02:
+            name: ${_param:openstack_control_node03_hostname}
+            enabled: True
+        fernet_rotation_driver: rsync
+  linux:
+    system:
+      job:
+        keystone_fernet_rotate_rsync:
+          command: '/var/lib/keystone/fernet_keys_rotate.sh -rs >> /var/log/keystone/fernet_rotate.log 2>> /var/log/keystone/fernet_rotate.log'
+          enabled: true
+          user: keystone
+          minute: 0